ARKVERSE PTE. LTD.
("Arkverse Private Policy") — last updated May 2026
This Privacy Policy explains how Arkverse Pte Ltd ("Arkverse") collects, uses, discloses, and protects your personal data when a user accesses or uses the Openmind platform, participates in our workshops, or otherwise interacts with us (the "User").
Openmind is a learning and research platform that hosts psychological and learning science tools. We collect longitudinal data about how individuals learn, in order to better understand learning patterns, generate personalised recommendations, and map the learning process over time. Our work is carried out in compliance with the Personal Data Protection Act 2012 ("PDPA") of Singapore and, where applicable, with research ethics oversight (IRB).
By accessing or using the platform, the User confirms that he/she has read and understood this Privacy Policy. Where required by the PDPA, we will collect, use and disclose the User's personal data only with the User's consent or as otherwise permitted by law.
This Privacy Policy is intended to notify the User of our personal data practices. It does not, by itself, constitute consent for every collection, use, or disclosure of personal data described below. Where the PDPA requires consent, or where we consider it appropriate having regard to the sensitivity of the data or the nature of the activity, we will seek the User's consent separately, including for research participation, use of photographs, videos or testimonials, marketing communications, and certain AI model development activities.
The organisation responsible for personal data is Arkverse Pte Ltd, 71 Ayer Rajah Crescent, #01-20, Singapore 139951. For the purposes of the PDPA, Arkverse is responsible for the personal data that it collects, uses, discloses, or processes in connection with the Services, except where it acts solely as a data intermediary processing personal data on behalf of a school, research institution, or other partner under a written agreement.
Data Protection Officer ("DPO"): Law Junkai, Samuel, reachable at dpo@arkverse.io. If the User has any questions about this Privacy Policy, wishes to access or correct their personal data, wishes to withdraw their consent, or wishes to raise a concern, please contact our DPO using the details above.
We collect personal data from the User directly, automatically through the User's use of the platform, and (in limited cases) from third parties such as schools or research partners with whom the User has an existing relationship.
We collect only the categories of personal data reasonably necessary for the purposes described in this Privacy Policy, and we will notify the User of any material changes to those categories or purposes.
Unless otherwise stated, the type of personal data that will be provided by the User to Arkverse includes, but is not limited to the following:
Identity and contact information: name, email address, phone number or messaging handle (e.g., Telegram), and (where applicable) the name of the school, organisation, or programme the User is participating through.
Demographic information: such as age range, gender, language, or educational background, where the User chooses to provide it.
Account credentials: such as a password (stored in encrypted form).
Workshop and session inputs: the User's responses to cognitive challenges, reflections, written submissions, drawings, and any other content the User submits on the platform or during sessions.
Photographs and recordings: still images, audio, or video taken during in-person or virtual sessions.
Communications: messages, feedback, and correspondence the User sends to us.
Unless otherwise stated, the type of personal data that will be automatically collected by Arkverse from the User includes, but is not limited to the following:
Interaction and learning data: timestamps, click and touch events, response times, navigation patterns, completion data, and other behavioural signals generated as you use the platform.
Device and technical data: IP address, browser type and version, operating system, device identifiers, and approximate location derived from IP.
Cookies and similar technologies: small data files stored on your device. See Section 11.
Unless otherwise stated, the type of personal data that will be automatically collected by Arkverse from third parties includes, but is not limited to the following:
In limited cases (for example, where you participate through a partner school or research collaborator), we may receive basic enrolment information from that partner. We will only collect such information where the partner has confirmed that you have been informed and, where required, have consented.
Where we receive your personal data from a third party, we will take reasonable steps to ensure that the third party had a valid basis to disclose that data to us and that you were notified, where required.
We collect, use and disclose your personal data only for the purposes set out below, or for purposes you would reasonably expect and that are otherwise permitted under the PDPA. Where consent is required, we will obtain your consent before doing so.
Operating the Openmind platform
Creating and maintaining your account.
Delivering the cognitive exercises, reflection prompts, and learning tools you have signed up for.
Personalising the learning pathway, content recommendations, and feedback based on your responses.
Communicating with you about the programme, sessions, scheduling, and updates.
Research and improvement to the Openmind platform
Analysing learning patterns, behavioural data, and outcomes (in aggregated and de-identified form) to improve our tools and develop new ones.
Conducting research aligned with our IRB-approved or ethics-reviewed protocols, where applicable.
Producing internal reports, papers, and presentations using aggregated, non-identifying findings.
AI features and model development
Generating personalised recommendations, summaries, or feedback through AI features (with human oversight where appropriate).
Where you have specifically consented, using anonymised and aggregated learning data to train, fine-tune, or evaluate AI models that support the platform.
Promotional and outreach use
The usage of photos, videos, or testimonials in our website, social media, or programme materials.
Legal, safety, and administrative purposes
Complying with applicable laws and regulatory requirements.
Protecting the rights, safety, and property of users, the public, and Arkverse.
Detecting, investigating, and preventing fraud, abuse, and security incidents.
Where permitted under the PDPA, we may also collect, use or disclose personal data without consent under an applicable exception, including for fraud prevention, legal compliance, or other purposes permitted by law.
Arkverse uses AI to support learning recommendations, generate feedback, summarise reflection content, and assist with mediated learning sessions. We design these features in line with Singapore's Model AI Governance Framework, including the recent guidance for agentic AI. In particular:
We do not use AI to make automated decisions that produce legal or similarly significant effects on you. AI outputs that may affect a user's learning pathway are subject to human oversight.
Our AI features are intended to support learning and reflection. They are not intended to provide medical, psychological, psychiatric, or other professional diagnoses or advice.
We disclose where AI is used in a feature.
Where you believe an AI-generated output has materially affected you, you may request that a member of the Arkverse team review it. Contact details are in Section 2.
We will use personal data for training, fine-tuning or evaluating AI models only where we have your consent or where such use is otherwise permitted by law. Where practicable, we will use anonymised or aggregated data for these purposes and will not use identifiable personal data for model training unless you have been clearly notified and have consented where required.
Some of our service providers and infrastructure may be located outside Singapore. Where we transfer personal data overseas, we will take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide the transferred personal data with a standard of protection consistent to that under the PDPA. Such steps may include contractual clauses, vendor assessments, certifications, or other lawful transfer mechanisms recognised under applicable law.
We retain personal data only for as long as is necessary for the purposes described in this Privacy Policy, including legal, accounting, and research purposes.
Account and contact information: retained while your account is active and for a reasonable period afterwards (typically up to 24 months).
Learning and interaction data: retained for the duration of the research programme and, where consented, in anonymised form thereafter to support longitudinal research.
Photos, videos, and testimonials: retained according to the consent given through the Media & Data Consent Form, and removed (where reasonably practicable) on withdrawal.
Communications and support records: retained for up to 24 months from the last interaction.
Where you withdraw your consent or request deletion, we will cease the relevant collection, use or disclosure and will delete or anonymise your personal data as soon as reasonably practicable, except where we are required or permitted by law to retain it for legal, accounting, operational or research purposes.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or loss. These include:
Encryption of data in transit and at rest.
Access controls limiting personal data access to authorised personnel.
Pseudonymisation and de-identification of research datasets where feasible.
Logging and monitoring of platform activity.
Regular review of security practices.
If we become aware of a personal data breach, we will assess the breach promptly and, where the breach is notifiable under the PDPA, notify affected individuals and the Personal Data Protection Commission in accordance with applicable legal requirements.
Under the PDPA, you may request access to and correction of your personal data held by us. You may also withdraw consent for the collection, use or disclosure of your personal data, subject to any legal, contractual or operational consequences that may affect our ability to provide the Services.
If you wish to exercise these rights, please contact our DPO using the details in Section 2. We may require information to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with the PDPA.
If you have any concern about how we handle your personal data, you may also raise a complaint with the PDPC.
Arkverse is intended for users aged 13 and above. Where a user is under the age of 18, we will obtain verifiable parental or guardian consent before collecting personal data where required, and we will take additional steps appropriate to the user's age and understanding. If we have reason to believe that the child does not have sufficient understanding to consent on their own, we will rely on parental or guardian consent. Where you believe a minor has provided us personal data without appropriate consent, please contact our DPO.
We may update this Privacy Policy from time to time. Where the changes are material, we will notify you through the platform or by email before the changes take effect. The "Last updated" date at the top of this policy reflects the most recent version. Material changes will be notified through the platform or by email before they take effect, and where required we will obtain fresh consent for new purposes.
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection Officer at dpo@arkverse.io.
These terms shall be governed by and construed in accordance with the laws of the Republic of Singapore.
For data-related enquiries, contact our Data Protection Officer at dpo@arkverse.io. General enquiries: hello@arkverse.io